Home

CVE-2021-28091

Description

Lasso all versions prior to 2.7.0 has improper verification of a cryptographic signature.

Risk Information

Base Score
7.5
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
EPSS Score
Exploitation Probability
0.512

Associated Vulnerability

VulnerabilityOS Platform
Liberty Alliance and SAML protocol Library (USN-4974-1) liblasso3_2.5.1-0ubuntu1.2_i386.debLinux
Liberty Alliance and SAML protocol Library (USN-4974-1) liblasso3_2.5.1-0ubuntu1.2_amd64.debLinux
Liberty Alliance and SAML protocol Library (USN-4974-1) liblasso3_2.6.0-7ubuntu1.2_amd64.debLinux
Liberty Alliance and SAML protocol Library (USN-4974-1) liblasso3_2.6.0-7ubuntu2.1_amd64.debLinux
Liberty Alliance and SAML protocol Library (USN-4974-1) liblasso3_2.6.1-2ubuntu0.1_amd64.debLinux
Liberty Alliance and SAML protocol Library (USN-4974-1) python-lasso_2.5.1-0ubuntu1.2_i386.debLinux
Liberty Alliance and SAML protocol Library (USN-4974-1) python-lasso_2.5.1-0ubuntu1.2_amd64.debLinux
Liberty Alliance and SAML protocol Library (USN-4974-1) liblasso-perl_2.5.1-0ubuntu1.2_i386.debLinux
Liberty Alliance and SAML protocol Library (USN-4974-1) liblasso-perl_2.5.1-0ubuntu1.2_amd64.debLinux
Liberty Alliance and SAML protocol Library (USN-4974-1) liblasso-perl_2.6.0-7ubuntu1.2_amd64.debLinux
Liberty Alliance and SAML protocol Library (USN-4974-1) liblasso-perl_2.6.0-7ubuntu2.1_amd64.debLinux
Liberty Alliance and SAML protocol Library (USN-4974-1) liblasso-perl_2.6.1-2ubuntu0.1_amd64.debLinux
Liberty Alliance and SAML protocol Library (USN-4974-1) python3-lasso_2.5.1-0ubuntu1.2_i386.debLinux
Liberty Alliance and SAML protocol Library (USN-4974-1) python3-lasso_2.5.1-0ubuntu1.2_amd64.debLinux
Liberty Alliance and SAML protocol Library (USN-4974-1) python3-lasso_2.6.0-7ubuntu1.2_amd64.debLinux
Liberty Alliance and SAML protocol Library (USN-4974-1) python3-lasso_2.6.0-7ubuntu2.1_amd64.debLinux
Liberty Alliance and SAML protocol Library (USN-4974-1) python3-lasso_2.6.1-2ubuntu0.1_amd64.debLinux
SUSE-SU-2021:2589-1(SUSE Linux Enterprise Server 12-SP5 ) liblasso3-2.6.1-8.7.2.x86_64.rpmLinux
SUSE-SU-2021:2589-1(SUSE Linux Enterprise Server 12-SP5 ) python3-lasso-2.6.1-8.7.2.x86_64.rpmLinux
(RHSA-2021:2989) lasso security update lasso-2.5.1-8.el7_9.i686.rpmLinux
(RHSA-2021:2989) lasso security update lasso-2.5.1-8.el7_9.x86_64.rpmLinux
(RHSA-2021:2989) lasso security update lasso-devel-2.5.1-8.el7_9.i686.rpmLinux
(RHSA-2021:2989) lasso security update lasso-devel-2.5.1-8.el7_9.x86_64.rpmLinux
(RHSA-2021:2989) lasso security update lasso-python-2.5.1-8.el7_9.x86_64.rpmLinux
Lasso update (ELSA-2021-2989) lasso-2.5.1-8.el7_9.i686.rpmLinux
Lasso update (ELSA-2021-2989) lasso-2.5.1-8.el7_9.x86_64.rpmLinux
Lasso-devel update (ELSA-2021-2989) lasso-devel-2.5.1-8.el7_9.i686.rpmLinux
Lasso-devel update (ELSA-2021-2989) lasso-devel-2.5.1-8.el7_9.x86_64.rpmLinux
Lasso-python update (ELSA-2021-2989) lasso-python-2.5.1-8.el7_9.x86_64.rpmLinux
lasso security and enhancement update (RLSA-2021:4325) lasso-2.6.0-12.el8.i686.rpmLinux
lasso security and enhancement update (RLSA-2021:4325) lasso-2.6.0-12.el8.x86_64.rpmLinux
(RHSA-2021:2989)Important: security update lasso-debuginfo-2.5.1-8.el7_9.i686.rpmLinux
(RHSA-2021:2989)Important: security update lasso-debuginfo-2.5.1-8.el7_9.x86_64.rpmLinux
(RHSA-2021:4325)Moderate: security and enhancement update java-lasso-debuginfo-2.6.0-12.el8.i686.rpmLinux
(RHSA-2021:4325)Moderate: security and enhancement update java-lasso-debuginfo-2.6.0-12.el8.x86_64.rpmLinux
(RHSA-2021:4325)Moderate: security and enhancement update lasso-2.6.0-12.el8.i686.rpmLinux
(RHSA-2021:4325)Moderate: security and enhancement update lasso-2.6.0-12.el8.x86_64.rpmLinux
(RHSA-2021:4325)Moderate: security and enhancement update lasso-debuginfo-2.6.0-12.el8.i686.rpmLinux
(RHSA-2021:4325)Moderate: security and enhancement update lasso-debuginfo-2.6.0-12.el8.x86_64.rpmLinux
(RHSA-2021:4325)Moderate: security and enhancement update lasso-debugsource-2.6.0-12.el8.i686.rpmLinux
(RHSA-2021:4325)Moderate: security and enhancement update lasso-debugsource-2.6.0-12.el8.x86_64.rpmLinux
(RHSA-2021:4325)Moderate: security and enhancement update perl-lasso-debuginfo-2.6.0-12.el8.i686.rpmLinux
(RHSA-2021:4325)Moderate: security and enhancement update perl-lasso-debuginfo-2.6.0-12.el8.x86_64.rpmLinux
(RHSA-2021:4325)Moderate: security and enhancement update python3-lasso-debuginfo-2.6.0-12.el8.i686.rpmLinux
(RHSA-2021:4325)Moderate: security and enhancement update python3-lasso-debuginfo-2.6.0-12.el8.x86_64.rpmLinux
Lasso update (ELSA-2021-4325) lasso-2.6.0-12.el8.i686.rpmLinux
Lasso update (ELSA-2021-4325) lasso-2.6.0-12.el8.x86_64.rpmLinux
lasso Security Update (ALAS-2021-1660) lasso-2.5.1-5.amzn2.0.1.i686.rpmLinux
lasso Security Update (ALAS-2021-1660) lasso-2.5.1-5.amzn2.0.1.x86_64.rpmLinux
lasso Security Update (ALAS-2021-1660) lasso-devel-2.5.1-5.amzn2.0.1.x86_64.rpmLinux
lasso Security Update (ALAS-2021-1660) lasso-python-2.5.1-5.amzn2.0.1.x86_64.rpmLinux
Improper Verification of Cryptographic Signature Vulnerability (CVE-2021-28091)NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234